Viktor Dukhovni 8d887efa2e Better invalid SNI name error handling ...

Also report an SSL_dane_enable error when the basedomain is an
invalid SNI name.  Avoid side-effects when such a name is valid
with X509_VERIFY_PARAM_set1_host(), as e.g. with an empty name, by
setting the SNI name first.

Reviewed-by: Rich Salz <rsalz@openssl.org>

2016-01-16 17:15:42 -05:00

..

record

Adapt all EVP_CIPHER_CTX users for it becoming opaque

2016-01-12 13:52:22 +01:00

statem

Adapt all EVP_CIPHER_CTX users for it becoming opaque

2016-01-12 13:52:22 +01:00

bio_ssl.c

Handle SSL_ERROR_WANT_X509_LOOKUP

2015-09-20 14:19:49 +01:00

d1_lib.c

Regenerate SSL record/statem error strings

2016-01-10 20:18:05 -05:00

d1_msg.c

Move in_handshake into STATEM

2015-10-30 08:39:47 +00:00

d1_srtp.c

PACKETise ServerHello processing

2015-09-07 10:45:38 +01:00

install-ssl.com

Updates following review comments

2015-05-16 09:20:52 +01:00

Makefile.in

Move Makefiles to Makefile.in

2016-01-12 16:26:56 -05:00

methods.c

Protocol version selection and negotiation rewrite

2016-01-02 10:49:06 -05:00

packet_locl.h

Instead of a local hack, implement SIZE_MAX in numbers.h if it's missing

2016-01-02 21:11:02 +01:00

s3_cbc.c

Cleanup: fix all sources that used EVP_MD_CTX_(create|init|destroy)

2015-12-07 17:40:20 +01:00

s3_enc.c

Adapt all EVP_CIPHER_CTX users for it becoming opaque

2016-01-12 13:52:22 +01:00

s3_lib.c

Empty SNI names are not valid

2016-01-16 17:15:28 -05:00

s3_msg.c

Remove redundant code

2015-10-30 08:38:18 +00:00

ssl_algs.c

Load module in SSL_library_init

2015-12-22 15:14:14 +00:00

ssl_asn1.c

Rename some BUF_xxx to OPENSSL_xxx

2015-12-16 16:14:49 -05:00

ssl_cert.c

EDH >= 1024 bits even at security level 0

2016-01-14 11:05:24 -05:00

ssl_ciph.c

GH528: "cipher -v" output is confusing.

2016-01-11 18:54:49 -05:00

ssl_conf.c

Allow disabling the min and max version

2016-01-10 13:04:55 +01:00

ssl_err2.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl_err.c

Regenerate SSL record/statem error strings

2016-01-10 20:18:05 -05:00

ssl_lib.c

Better invalid SNI name error handling

2016-01-16 17:15:42 -05:00

ssl_locl.h

RT4232: Extra space in help message.

2016-01-14 11:32:18 -05:00

ssl_mcnf.c

Correct missing prototype

2015-12-30 14:57:16 +01:00

ssl_rsa.c

Use X509_get0_pubkey where appropriate

2015-12-31 18:44:46 +00:00

ssl_sess.c

Add lh_doall_arg inlining

2016-01-11 17:50:27 +00:00

ssl_stat.c

Change SSL_state_string return strings to start with a T

2015-10-30 08:39:47 +00:00

ssl_txt.c

Remove BIO_s_file_internal macro.

2015-10-02 14:22:05 -04:00

ssl_utst.c

Run util/openssl-format-source -v -c .

2015-01-22 09:20:09 +00:00

ssl-lib.com

Move SSLv3_*method() functions

2015-05-16 09:20:58 +01:00

t1_enc.c

Adapt all EVP_CIPHER_CTX users for it becoming opaque

2016-01-12 13:52:22 +01:00

t1_ext.c

Rename some BUF_xxx to OPENSSL_xxx

2015-12-16 16:14:49 -05:00

t1_lib.c

Adapt all EVP_CIPHER_CTX users for it becoming opaque

2016-01-12 13:52:22 +01:00

t1_reneg.c

PACKETise ServerHello processing

2015-09-07 10:45:38 +01:00

t1_trce.c

Remove fixed DH ciphersuites.

2015-12-19 16:14:51 +00:00

tls_srp.c

Rename some BUF_xxx to OPENSSL_xxx

2015-12-16 16:14:49 -05:00